MULTIPLY MONOGENIC ORDERS 
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Abstract. Let A — Z[a;i, . . . ,Xr] D Z be a domain which is finitely gen- 
erated over Z and integrally closed in its quotient field L. Further, let K 
be a finite extension field of L. An A-order in if is a domain O D A with 
quotient field K which is integral over A. A-orders in K of the type A[a] are 
called monogenic. It was proved by Gyory 10^ that for any given A-order 
O in K there are at most finitely many A-equivalence classes oi a E O 
with A[a] = O, where two elements a, /3 of O are called A-equivalent if 
(3 = ua + a ioi some u G A* , a G A. If the number of A-equivalence classes 
of a with A[a] = O is at least k, we call O k times monogenic. 

In this paper we study orders which are more than one time monogenic. 
Our first main result is that if K is any finite extension of L of degree 
> 3, then there are only finitely many three times monogenic A-orders in 
K. Next, we define two special types of two times monogenic A-orders, and 
show that there are extensions K which have infinitely many orders of these 
types. Then under certain conditions imposed on the Galois group of the 
normal closure of K over L, we prove that K has only finitely many two 
times monogenic A-orders which are not of these types. Some immediate 
applications to canonical number systems are also mentioned. 
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1. Introduction 

In this introduction we present our results in the special case A = Z. Our 
general results over arbitrary finitely generated domains A are stated in the 
next section. 

Let K be an algebraic number field of degree d > 2 with ring of integers 
Ok- The number field K is called monogenic if Ok = for some a G Ok- 
This is equivalent to the fact that {!,«,..., a'^"^} forms a Z-module basis for 
Ok- The existence of such a basis, called power integral basis, considerably 
facilitates the calculations in Ok and the study of arithmetical properties of 
Ok- 

The quadratic and cyclotomic number fields are monogenic, but this is not 
the case in general. Dedekind [1] gave the first example for a non- monogenic 
number field. 

More generally, an order O in K, that is a subring of Ok with quotient field 
equal to K, is said to be monogenic if O = Z[a] for some a & O. Then for 
P = ±a + a with a G Z we also have O = Z[/3]. Such elements a, (3 of O are 
called Z- equivalent. 

In this paper, we deal with the "Diophantine equation" 
(1.1) Z[a] =0 inaeO 

where O is a given order in K. As has been explained above, the solutions of 
(II. ip can be divided into Z-equivalence classes. It was proved by Gyory [7], |H], 
[9] that there are only finitely many Z-equivalence classes of a G O with (11. ip , 
and that a full system of representatives for these classes can be determined 
effectively. Evertse and Gyory [5] gave a uniform and explicit upper bound, 
depending only on d = [K : <Q], for the number of Z-equivalence classes of such 
a. For various generalizations and effective versions, we refer to Gyory [T3] . 

In what follows, the following definition will be useful. 

Definition. An order O is called k times monogenic, if there are at least k 
distinct Z-equivalence classes of a with (11. ip . in other words, if there are at 
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least k pairwise Z-inequivalent elements ai, . . . , G O such that 

O = Z[ai] = ■ ■ ■ = Z[ak]. 

Similarly, the order O is called precisely/at most k times monogenic, if there 
are precisely/at most k Z-equivalence classes of a with (11. ip . 

It is not difficult to show that any order (9 in a quadratic number field is 
precisely one time monogenic, i.e., there exist a G O with (11. ip . and these a 
are all Z-equivalent to one another. 

Our first result is as follows. 

Theorem 1.1. Let K be a number field of degree > 3. Then there are at most 
finitely many three times monogenic orders in K. 

This result is a refinement of work of Berczes p] . 

The bound 3 is best possible, i.e., there are number fields K having infinitely 
many two times monogenic orders. We believe that if K is an arbitrary number 
field of degree > 3, then with at most finitely many exceptions, all two times 
monogenic orders in K are of a special structure. Below, we state a theorem 
which confirms this if we impose some restrictions on K. 

Let i^' be a number field of degree at least 3. An order O in K is called of 
type I if there are a, P e O and Z) ^ GL(2, Z) such that 

(1.2) K = Q{a), = Z[a] = Z[/3], p = ^l^±^^ 0. 

CL^ct -\- 

Notice that (3 is not Z-equivalent to a, since 03 7^ and K has degree at least 
3. So orders of type I are two times monogenic. 

Orders O of type II exist only for number fields of degree 4. An order O 
in a quartic number field K is called of type II if there are a, /3 G O and 

ao,ai,a2,bo,bi,b2 G Z with ao^o 7^ such that 

(1.3) K = Q{a), O = Z[a] =Z[/3], 

13 = a^c? + a\oi + 02, a = bo(3'^ + bi(3 + 62- 

Orders of type II are certainly two times monogenic. At the end of this section, 
we give examples of number fields having infinitely many orders of type I, 
respectively II. 
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Let £■ be a field of cliaracteristic 0, and F = E{6)/E a finite field extension 
of degree d. Denote by the conjugates of 6 over E, and by G 

the normal closure E{6^^\ . . . , ^'•'^^) of F over E. We call F m times transitive 
over E {m < d) if for any two ordered m-tuples of distinct indices (zi, . . . , 
(ii; • • • ! im) from {1, . . . , c?}, there is cr G Gal(G'/-E') such that 



If ii^ = Q, we simply say that F is m times transitive. 
We denote by Sn the permutation group on n elements. 
Our result on two times monogenic orders is as follows. 

Theorem 1.2. (i) Let K he a cubic number field. Then every two times 
monogenic order in K is of type I. 

(ii) Let K be a quartic number field of which the normal closure has Galois 
group S4. Then there are at most finitely many two times monogenic orders 
in K which are not of type I or of type U. 

(ill) Let K be a four times transitive number field of degree at least 5. Then 
there at most finitely many two times monogenic orders in K which are not of 



In Section [2] we present some immediate applications of our results to canoni- 
cal number systems. In Section [3] we formulate generalizations of Theorems ll.il 
and 11.21 for the case that the ground ring is an arbitrary integrally closed do- 
main which is finitely generated over Z. Sections |1H6] contain auxiliary results, 
and Sections [3-[9] contain our proofs. 

Our proofs of Theorems 11.11 and 11.21 use finiteness results on unit equations 
in more than two unknowns, together with some combinatorial arguments. At 
present, it is not known how to make the results on unit equations effective, 
therefore we are not able to determine effectively the three times monogenic 
orders in Theorem 11.11 or the two times monogenic orders not of type I or II 
in Theorem II. 2[ Although it is possible to estimate from above the number of 
solutions of unit equations, it is because of the combinatorial arguments in our 
proofs that we are not able to estimate from above the numbers of exceptional 
orders in Theorems 11.11 and 11.21 




type L 
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We finish this introduction with constructing number fields having infinitely 
many orders of type I, respectively type II. 

Let be a number field of degree > 3 which is not a totally complex 
quadratic extension of a totally real field. By Dirichlet's Unit Theorem, for 
any proper subfield L of the rank of (the group of units of the ring of 
integers of L) is smaller than that of 0*j^. We show that K has infinitely many 
orders of type I. Take {a\a\) G GL(2,Z) with ^ 0. Suppose that there is 
uq G 0*j^ such that Uq = (mod a^). This is the case for instance if 04 = 1. 
By the Euler-Fermat Theorem for number fields, there is a positive integer t 
such that = 1 (mod 03) for every u G Hence the group of units u G 
with u = 1 (mod a^) has finite index in O^^. Consequently, there are infinitely 
many units u G O^^ with u = (mod 03). By our assumption on K, among 
these, there are infinitely many u with Q{u) = K. For each such m, put 

■u — 04 aia + 02 

a := , p := . 

03 030 + tti 

Then clearly, K = Q(a). From the minimal polynomial of u we derive a 
relation = f{u) with / G Z[X]. Hence /3 = (aia + a2)f{a-ia + 04) G Z[a;]. 
Since /3 = (04/? — 0'2)/{~0'?,P + c^i) s-nd —03/? + ai = ±m~-^, we obtain in a 
similar fashion a G Z[/3]. Therefore, Z[a] = Z[/3]. By varying (aj 04 ) and u we 
obtain infinitely many orders of type I in K. 

For instance, for u G O]^ we have Z[m] = Z[m~^] and the discriminant of 
this order is the discriminant of (the minimal polynomial of) u. By Gyory 
[HI CoroUaire 2.2], there are at most finitely many units u G O]^ of given 
discriminant. Hence there are infinitely many distinct orders among Z[m] {u G 
0*k). 

We now construct quartic fields with infinitely many orders of type II. The 
construction is based on the theory of cubic resolvents, see van der Waerden 
1201 §64]. 

Let r, s be integers such that the polynomial f{X) = (X^ — r)^ — X — s 
is irreducible and has Galois group S4. There are infinitely many such pairs 
(r, s) (see, e.g., Kappe and Warren f^). Denote by a^^^ = a, a^'^\ a^^\ a^'^^ 
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the roots of / and let K := Q(o;). Define 



'71 


:= -(aW 


+ «(2))(^(3) 








^2 


:= 






= (a(^) 




^73 


:= 






= (a(^) 





Then 

(1.4) (X - 7]i){X - 7]2){X - r]3) = X^- ArX^ + 4sX - 1. 

Take 

Then 

(1-5) y/rn- y/r]^- y/r]i= I- 

By the Gauss-Fermat Theorem over number fields, there exists a positive 
integer t such that 

(1.6) Tl\ = ^ (mod 4). 

Consider for m = 0, 1, 2, . . . the numbers 

o 1 / , l-2mt I / l-2mt , , \-2m.t\ 

The numbers am are invariant under any automorphism that permutes a^'^\ a^^\ 
i.e., under any automorphism that leaves K invariant, hence they belong to K. 
Further, they have four distinct conjugates, so Q{am) = K. Next, by (11. 5p . 

^my Pm "^m; 

where 

Tm = \ (r/^^'"* + Vl^'"-' + , 
Sm = \ {ri-,'-'-' + r^^'-'-' + % '-'"^0 • 

By (ll.4p . (ll.6l) . r-m, are rational integers, hence a^, Pm are algebraic integers 
for every m. We thus obtain for every non- negative integer m an order T^pin^ = 
Z[Pm] of type II in K. 
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We claim that among the orders 'L[a„i\ there are infinitely many distinct 
ones. Denote by Dm the discriminant of Z[am]- Then Dm is equal to the 
discriminant of a^, and a straightforward computation shows that this is equal 
to the discriminant of r^J^^™*. By [8, Corollaire 2.2], we have \Dm\ — )■ oo as 
m — )■ oo. This implies our claim. 

2. Application to canonical number systems 

Let K be an algebraic number field of degree > 2, and O an order in K. A 
nonzero element a in is called a basis of a canonical number system (or CNS 
basis) for O if every nonzero element of O can be represented in the form 

+ aia + ■ ■ ■ + amCi^ 

with m > 0, ttj G {0, 1, ... , \NK/Q{a)\ — 1} for i = 0, . . . ,m, and 7^ 0. 
Canonical number systems can be viewed as natural generalizations of radix 
representations of rational integers to algebraic integers. 

When there exists a canonical number system in O, then O is called a CNS 
order. Orders of this kind have been intensively investigated; we refer to the 
survey paper [2] and the references given there. 

It was proved by Kovacs [15j and Kovacs and Petho [16] that O is a CNS 
order if and only if O is monogenic. More precisely, if a is a CNS basis in O, 
then it is easily seen that O = Z[a]. Conversely, O = Z[a] does not imply 
in general that a is a CNS basis. However, in this case there are infinitely 
many a' which are Z-equivalent to a such that a' is a CNS basis for O. A 
characterization of CNS bases in O is given in [T6] . 

The close connection between elements a of O with O = Z[q;] and CNS 
bases in O enables one to apply results concerning monogenic orders to CNS 
orders and CNS bases. The results presented in Section [1] have immediate 
apphcations of this type. For example, it follows that up to Z-equivalence 
there are only finitely many canonical number systems in O. 

We say that (9 is a k-times CNS order if there are at least k pairwise Z- 
inequivalent CNS bases in O. Theorem 1.1 gives the following. 
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Corollary 2.1. Let K he an algebraic number field of degree > 3. Then there 
are at most finitely many three times CNS orders in K . 



Let y4 be a domain with quotient field L of characteristic 0. Suppose that 
A is integrally closed, and that A is finitely generated over Z as a Z-algebra. 
Let be a finite extension of L of degree at least 3, Ak the integral closure 
oi Am and O an A-order in that is a subring of A^ which contains A 
and which has quotient field K. Consider the equation 



The solutions of this equation can be divided into A-equivalence classes, where 
two elements of (9 are called A- equivalent if /3 = + a for some a E A 
and u E A* . Here A* denotes the multiplicative group of invertible elements 
of A. As is known (see Roquette [IS]), A* is finitely generated. 

It was proved by Gyory [TD] that the set of a with (13.1 p is a union of finitely 
many A-equivalence classes. An explicit upper bound for the number of these 
A-equivalence classes has been derived by Evertse and Gyory [5j. An effective 
version has been established by Gyory for certain special types of domains (TTj . 

We now formulate our generalizations of the results from the previous sec- 
tions to A-orders. We call an A-order O k times monogenic, if Eq. (13. ip has 
at least k A-equivalence classes of solutions. 

Theorem 3.1. Let A be a domain with quotient field L of characteristic 
which is integrally closed and finitely generated over Z, and let K be a finite 
extension of L of degree > 3. Then there are at most finitely many three times 
monogenic A-orders in K . 

We now turn to two times monogenic A-orders. Let again i^' be a finite 
extension of L of degree at least 3. We call O an A-order in K of type I if 
there are a, /3 G C and ( "3 a' ) G GL(2, L) such that 



3. Results over finitely generated domains 



(3.1) 



A[a] = in a G C. 



(3.2) 



K = L{a), O = A[a] = A[/3], (3 



, 03 7^ 0. 



030 -|- 04 
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It should be noted that in the previous section (with L = Q, A = Z) we had 
in our definition (11.21) of orders of type I the stronger requirement (alal) G 
GL(2, Z) instead of ( alal)^ GL(2, Q). In fact, if A is a principal ideal domain, 
we can choose 01,02,03,04 in (13 ■2p such that 01,02,03,04 G A and the ideal 
generated by Oi, . . . , O4 equals A. In that case, according to Lemma [231 proved 
in Section E] below, (jM]) implies that (alZ)^ GL(2, A). 

A-orders of type II exist only in extensions of L of degree 4. Thus, let K be 
an extension of L of degree 4. We call O an A-order in K of type II if there 
are a, (3 E O and oq, oi, 02, 60, bi, b2 E A with oq&o 7^ 0, such that 

(3.3) K = L{a), O = A[a] = A[/3], 

(3 = ooa^ + Oia + 02, a = h^P"^ + hia + 62- 

Theorem 3.2. Let A he a domain with quotient field L of characteristic 
which is integrally closed and finitely generated over Z, and let K he a finite 
extension of L. Denote hy G the normal closure of K over L. 

(i) Suppose [K : L] = 3. Then every two times monogenic A-order in K is of 
type I. 

(ii) Suppose [K : L\ = 4: and Gal(G/L) = 6*4. Then there are only finitely 
many two times monogenic A- orders in K which are not of type I or type II. 

(iii) Suppose [K : L] > 5 and that K is four times transitive over L. Then 
there are only finitely many two times monogenic A-orders in K which are not 
of type I. 

4. Equations with unknowns from a finitely generated 

multiplicative group 

The main tools in the proofs of Theorems 13 . 1 1 and 13 . 21 are finiteness results on 
polynomial equations of which the unknowns are taken from finitely generated 
multiplicative groups. In this section, we have collected what is needed. Below, 
G is a field of characteristic 0. 

Lemma 4.1. Let oi, 02 G G* and let T he a finitely generated suhgroup of G* . 
Then the equation 

(4.1) 01X1 + 02X2 = 1 in xi,X2ET 
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has only finitely many solutions. 

Proof. See Lang [T7|. □ 

A pair (ai, 02) G {G*)^ = G* x G* is called normalized if (1, 1) is a solution 
to (14. ip . i.e., ai + a2 = 1. If (14. ip has a solution, {yi, 2/2), say, then by replacing 
(ai, 02) by (ai^/i, 021/2) we obtain an equation like (14. ip with a normalized pair 
of coefficients, whose number of solutions is the same as that of the original 
equation. 

Lemma 4.2. Let T be a finitely generated subgroup of G* . There is a finite 
set of normalized pairs in {G*Y , such that for every normalized pair (oi, 02) G 
{G*Y outside this set, equation has at most two solutions, the pair (1, 1) 
included. 



Proof. This result is due to Evertse, Gyory, Stewart and Tijdeman [6]; see also 
|12] . We note that the proof depends ultimately on the Subspace Theorem, 
hence it is ineffective. □ 

We consider more generally polynomial equations 

(4.2) /(xi, . . . ,a;„) = in xi, . . . , x„ G T 

where / is a non-zero polynomial from G [Xi , . . . , X„] and F is a finitely 
generated subgroup of G* . Denote by T an auxiliary variable. A solution 
(xi, . . . , Xn) of (14. 2 p is called degenerate, if there are integers ci, . . . , c^, not all 
zero, such that 

(4.3) f{xir\ . . . , a;„T'=") = identically in T, 
and non- degenerate otherwise. 

Lemma 4.3. Let f be a non-zero polynomial from (^[Xi, . . . , X^] and T a 
finitely generated subgroup of G* . Then Eq. \4.2\} has only finitely many non- 
degenerate solutions. 

Proof. Given a multiplicative abelian group if, we denote by if" its n-fold 
direct product with componentwise multiplication. 
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Let V be the hypersurface given by / = 0. Notice that the degenerate 
solutions X are precisely those, for which there exists an algebraic subgroup H 
of {G*)^ of dimension > 1 such that xi7 C V. By a theorem of Laurent [T8] . 
the intersection l^flF" is contained in a finite union of cosets xiifi U ■ ■ ■ Uxj-if^ 
where Hi, . . . ,Hr are algebraic subgroups of (G*)", elements of 

F", and Xjifj C V for i = l,...,r. The non-degenerate solutions in our 
lemma are precisely the zero-dimensional cosets among xii^i, . . . , i(.rHr-, while 
the degenerate solutions are in the union of the positive dimensional cosets. □ 

5. Finitely generated domains 

We recall some facts about domains finitely generated over Z. 

Let A be an integrally closed domain with quotient field L of characteristic 
which is finitely generated over Z. Then A is a Noetherian domain. Moreover, 
A is a Krull domain; see e.g. Bourbaki [3], Chapter VII, §1. This means the 
following. Denote by V{A) the collection of minimal non-zero prime ideals of 
A, these are the non-zero prime ideals that do not contain a strictly smaller 
non-zero prime ideal. Then there exist normalized discrete valuations ordp 
(p G V{A)) on L, such that the following conditions are satisfied: 

for every x G K* there are only finitely many p G V{A) with 
ordp(x) 7^ 0, 

(5.2) A = {xeK : ordp(x) > for p G V{A)], 

(5.3) p = [xe A : ordp(x) > O} for p G V{A). 

These valuations ordp are uniquely determined. As is easily seen, for x,y E L* 
we have 

(5.4) ordp(a;) = ordp(?/) for all p G V{A) xy'^ G A*. 

Let G be a finite extension of L. Denote by Ac the integral closure of A 
in G, and by Aq the unit group, i.e., group of invertible elements of Aq- We 
will apply the results from Section H] with F = Aq. To this end, we need the 
following lemma. 

Lemma 5.1. The group Aq is finitely generated. 
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Proof. The domain Aq is contained in a free A- module of rank [G : L]. Since 
A is Noetherian, the domain Aq is finitely generated as an A-module, and so 
it is finitely generated as an algebra over Z. Then by a theorem of Roquette 
[T9] . the group Aq is finitely generated. □ 



6. Other auxiliary results 



We have collected some elementary lemmas needed in the proofs of Theorems 
13.11 and 13.21 Let A be an integrally closed domain with quotient field L of 
characteristic which is finitely generated over Z, and K a finite extension of 
L with [K : L] =: d > 3. Denote by G the normal closure of K over L. Let 
(Ji = id, ... ,ad be the distinct L-isomorphisms of K in G, and for a ^ K write 
a*-*-* := o"i(a) for i = 1, . . . , (i. Denote by Ak and Ac the integral closures of 
A in K and G, respectively, and by Aq the multiplicative group of invertible 
elements of Aq. 

The discriminant of a G is given by 

l<i<j<d 

This is an element of L. We have L{a) = K if and only if all conjugates of a 
are distinct, hence if and only if Dk/l{o:) 7^ 0. Further, if a is integral over A 
then Dfc/Lici) ^ ^ since A is integrally closed. 

Lemma 6.1. Let a, /3 G Ak and suppose that L{a) = L{P) = K, A[a] = A[P]. 
Then 



Dk/lW) 
DK/L{a) 



G Aq fori,] e{l,...,d},i 7^ j, 



G A*. 



Proof, (i) Let i, j G {1, . . . , d}, i 7^ j. We have /3 = /(a) for some / G ^[-^]. 
Hence 

Q,(i) - Q,(i) a(0 - 

Likewise (a^^^ - a^^'^)/{P^^ - P^^^) G Aq. This proves (i). 
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(ii) We have on the one hand, Dk/l{P)/ Dk/l{(^) ^ L* , on the other hand 



Since A is integrally closed, this proves (ii). □ 

We call two elements a, /3 of K L-equivalent if /3 = ua + a for some u G 
L*,a e L. 

Lemma 6.2. Let a, /3 G and suppose that L{a) = L{P) = K , A[a\ = A[I3], 
and a, /3 are L-equivalent. Then a, /3 are A-equivalent. 

Proof. By assumption, [i = ua + a with u & L*, a & L. By the previous lemma, 
y^d(d-i) ^ Dk/l{P)/Dk/l{c() G a*, and then u G A* since A is integrally closed. 
Consequently, a = (3 — ua is integral over A. Hence a E A. This shows that 
a, /3 are y4-equivalent. □ 

For a E K with K = L{a) we define the ordered {d — 2)-tuple 

(6.1) r(«) := 



Lemma 6.3. (i) Lei a, (3 with L{a) = L{/3) = K. Then a, (3 are L-equivalent 
if and only if t{q) = t{[3). 

(ii) Let G A^ and suppose that L{a) = L{(3) = K, A[q\ = A[I3]. Then 
a,/3 are A-equivalent if and only if T{a) = t(/3). 

Proof, (i) If a,P are L-equivalent, then clearly T{a) = t(/3). Assume con- 
versely that T{a) = t(/3). Then there are unique u G G*, a E G such that 

(6.2) (/3«,...,/3W) =«(««,..., a('^)) + a(l,...,l). 

In fact, the unicity of u,a follows since thanks to our assumption K = L{a), 
the numbers a^^\ . . . , a^"^^ are distinct. As for the existence, observe that fl6.2p 
is satisfied with u = {P^^^ - /3(i))/(a(2) - a^^)), a = [3^^^ - ua^^\ 

Take a from the Galois group Gal {G/L). Then a o cti, croo"rf is a permu- 
tation of the L-isomorphisms ai, . . . , cr^ : K "-^ G. It follows that a permutes 
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(1) 



, 0;^*^^) and {(3^^\ . . . , (3^'^'') in the same way. So by applying a to (16. 2p 



[a 

we obtain 

. . . , = . . . , a^'^)) + a(a)(l, . . . , 1). 

By the unicity of u, a in (16. 2p this imphes cr(M) = u, a{a) = a. This holds for 
every cr G Gal {G / L). So in fact u G L*, a E L, that is, a, /3 are L-equivalent. 

(ii) Use Lemma [6.21 □ 

We denote by ( ) the ideal of A generated by 

Lemma 6.4. Let a,f3 E Ak with L{a) = L{(i) = K, A[a\ = A[I3]. Suppose 
there is a matrix (alal) G GL(2, L) with 

(6.3) /3 = ■ , as ^ 0, 

a^a + a4 

(6.4) ai, 02, as, 04 G A, (ai, a2, as, 04) = (1). 
Then{Z Z)^Gh{2,A). 

Remark. Let O be an A-order of type I, as defined in Section [3l Then there 
exist a, 13 with O = A[a] = A[(3], and a matrix U := (alZ) ^ GL(2,L) with 
(16. 3p . If y4 is a principal ideal domain then by taking a suitable scalar multiple 
of U we can arrange that (16. 4 p also holds, and thus, that U G GL(2, A). 

Proof. Since a G Ak and L(a) = K, it has a monic minimal polynomial 
/ G v4[X] over L of degree ci. Moreover, since A[f3] = A[a], we have 

(6.5) l3 = ro + ria H h r^.i^'^"^ with Tq, . . . , r^-i G A. 

Hence 

(6.6) (asX + a4)(rrf_iX'^-i + . . . + tq) - aiX - 03 = a^r^-ifiX). 
Equating the coefficients, we see that 

(6.7) a^rQ - 02 G asr^-iA, a^ri + asro - ai G a^rd-iA, 

(6.8) a4rj + asr^.i G asr^-iA (j = 2, . . . , ci - 1). 
We first prove that 

(6.9) af^Tj eA for j = 1, . . . , d - 1. 
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In fact, we prove by induction on i (1 < i < d—1), the assertion that ct3~"'Vj G A 
for j = 1, . . . ,i, and a\~^rj G A for j = z + 1, . . . , ci — 1. For 2 = 1 this is clear. 
Let 2 < i < d — \ and suppose that the assertion is true for i — 1 instead 
of i. Then Sj := Ci\~^Tj G A for j = i, . . . , c? — 1. Further, by fl6.8p . we have 
a^^Sj + a3Sj_i = Zja^Sd-i with 2;^ G A for j = i, . . . , li — 1. Next, by fl6.7p 
we have ai,a2 G (03,04), and then (03,04) = (1) by (16 .4^ . That is, there are 
X, y G A with X03 + ya^ = 1. Consequently, for j = i, . . . , — 1, we have 

Sj = (X03 + ya4)sj = asi^xsj + y{zjSd-i - Sj-i)) G 03A, 

i.e., al~^rj = a^^Sj G A. This completes our induction step, and completes 
the proof of (16. 9p . 

Now define the binary form F{X,Y) := V^f^X/Y). Then (16. 6 p implies 
03r,_iF(X, Y) = (03X + 04F)(- ■ ■ ) - Y'^-^a.X + 02F). 
Substituting X = 04, y = — 03, and using (16. 9p . it follows that 
(6.10) -F(o4, — 03) = s~^(oi04 — 02O3) with s G A. 

Denote by a^^\ . . . , a*^'^^ the conjug ates of a, and by f3^^\ . . . , /3^'^^ the corre- 
sponding conjugates of /3. Then for the discriminant of /3 we have, by (16. 3p . 

dnio]), 

l<i<j<d 

= (0104 - 0203)'^''-') llia^ + asa^"^) J] ("^'^ " "^'^)' 

\i=l / l<«<j<(i 

= (01O4 - 0203)''(''-')F(o4, -03)-'''+'D/^/l(«) 
= ,2d-2(^^^^ _ 0203)('^-^)('^'2)Z^X/L(a). 



On the other hand, by Lemma [6AI (ii) we have D k / / D k / L{.Ci) G A* . Using 
also that A is integrally closed, it follows that (i\(i4 — 02O3 G A* . This completes 
our proof. □ 
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7. Proof of Theorem 13.11 

The proof splits into two parts. Consider /3 G Ak with K = L{[5). The 
first part, which is Lemma [7. II below, implies that the set of /3 such that A[(S\ 
is three times monogenic, is contained in a union of at most finitely many 
L-equivalence classes. The second part, which is Lemma 17.21 below, implies 
that if C is a given L-equivalence class, then the set of /3 G C such that A[lS\ 
is two times monogenic, is in a union of at most finitely many A-equivalence 
classes. (Lemma 17.21 is used in the proof of Theorem 13.21 as well, therefore it 
deals with two times monogenic orders.) Any three times monogenic A-order 
in K can be expressed as A[(i\. A combination of Lemmas 17. II and 17.21 clearly 
yields that the set of such /3 lies in finitely many A-equivalence classes. Since 
y4-equivalent /3 give rise to equal A-orders v4[/3], there are only finitely many 
three times monogenic orders in K. 

Lemma 7.1. The set of P such that 

(7.1) /3 G Ax, L{[5) = K, A[P] is three times monogenic 

is contained in a union of at most finitely many L-equivalence classes. 

Proof. Assume the contrary. Then there is an infinite sequence of triples 
{(/3ip, /32p, (^sp) ■ P = 1, 2, . . .} such that 

(7.2) f3hp G Ak, L{(3hp) = for /i = 1, 2, 3, p = 1, 2, . . . ; 

(7.3) Pip {p = 1,2, . . .) lie in different L-equivalence classes 
and for p = 1, 2, . . . , 



(7.4) 



A[(3ip] = A[P2p] = A[(3sp], 

Pip, P2p, Psp lie in different A-equi valence classes 

(so the Pip play the role of P in the statement of our lemma). For any three 
distinct indices i,j, k from {1, . . . , d}, and for h = 1,2,3, p = 1,2, .. ., put 



(ijk) t^hp l^hp 



t-'hp l-'hp 

By (17. 2p . these numbers are well-defined and non-zero. 
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We start with some observations. Let i,j,k be any three distinct indices 

hp ' yhp 



from {1, . . . ,d}. By Lemma 16.11 and the obvious identities + = 1 



{h = 1,2,3), the pairs (/^if V/^if \ /^if V/^if ^) (h = 1,2,3) are solutions to 

(7.5) /3if )x + /3jf V = 1 mx,yeA*^. 

Notice that (17. 5p has solution (1, 1). So according to Lemmas 14. 2[ 15. H there is 
a finite set Aijk such that if Pip'^^ ^ Aijk, then (17. 5p has at most two solutions, 
including (1,1). In particular, there are at most two distinct pairs among 
(/3ir//3if\tf/V/5!f^) (^ = 1,2,3). Consequently, 

(7.6) /S^p ^ Aijk =^ two among /3[^^''\ /32p''\ P^p''^ are equal. 

We start with the case d = 3. Then T{(3hp) = W'ff^^) for /i = 1, 2, 3. By 
and Lemma [6.3K i) the numbers /^ji^^'' {p = 1,2, . . .) are pairwise distinct. By 



(17. 6p and Lemma [6.3l (ii). for all but finitely many p, two among the numbers 
/^hp'^^ (/i = 1,2,3) are equal and hence two among Php {h = 1,2,3) are A- 
equivalent which contradicts (I7.4p . 

Now assume d > 4. We have to distinguish between subsets {i,j,k} of 
{1, . . . ,d} and indices h for which there are infinitely many distinct numbers 
among jS^p''^ {p = 1,2, . . .), and k} and h for which among these numbers 
there are only finitely many distinct ones. This does not depend on the choice 
of ordering of k, since any permutation of k) transforms /3^p '^'' into one 

of 1 - (1 - 1 - (1 - wS'^')-'- 

There is a subset k} of {1, . . . ,d} such that there are infinitely many 
distinct numbers among pff^ (p = 1,2,...). Indeed, if this were not the 
case, then there would be only finitely many distinct tuples among r(/3ip) = 

.(132) n{ld2) 



{/3ip , . . . , (3\p ) , and then by Lemma [63| (i) the numbers Pip would lie in only 
finitely many L-equivalence classes, contradicting (17.31) . There is an infinite 
subsequence of indices p such that the numbers /3[p''^ are pairwise distinct. 
Suppose there is another subset {i', j', k'} ^ {i, j, k} such that if p runs through 
the infinite subsequence just chosen, then p[p'' ^ ^ runs through an infinite set. 
Then for some infinite subsequence of these p, the numbers P^p^ ^ are pairwise 
distinct. Continuing in this way, we infer that there is a non-empty collection 
S of 3-element subsets {i,i,k} of {l,...,d}, and an infinite sequence V of 
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indices J9, such that for each {i,j,k} E S the numbers {p E V) are 

pairwise distinct, while for each {i,j,k} ^ S, there are only finitely many 
distinct elements among /Sjp '^'' {p eV). 

Notice that if {i, j, k} S, then among the equations (17.51) with p eV, there 
are only finitely many distinct ones, and by Lemmas 14. ![ 15. ![ each of these 
equations has only finitely many solutions. Therefore, there are only finitely 
many distinct numbers among /S^p'^V/^ip hence only finitely many among 
[h = 2,3, p E V). Conversely, if {i,j,k} E S, h E {2,3}, there are 
infinitely many distinct numbers among /S^^'^'* {p E V). For if not, then by the 
same argument, interchanging the roles of f3hp, Pip, it would follow that there 
are only finitely many distinct numbers among 13'^^^^ {p E V), contradicting 
{i,j,k} E S. 

We conclude that there is an infinite subsequence of p, which after renaming 
we may assume to be 1,2,.. ., such that for h = 1,2, 3, 

(7.7) l^hp''^ (p = 1) 2, . . .) are pairwise distinct if k} E S, 



there are only finitely many distinct numbers among 
^^'^^ {p=l,2,...) if {z,j,k}^S. 

Notice that this characterization of S is symmetric in Php {h = 1,2,3); this 
will be used frequently. 

We frequently use the following property of 5: if i, j, k, I are any four distinct 
indices from {1, . . . ,d}, then 

(7.9) {t, J, k}ES^{t,j,l}ES or {z, k,l}ES. 

Indeed, if I}, [i, k,l} ^ S then also k} ^ S since /J^f ^ = /^If /C^- 

Pick a set from S, which without loss of generality we may assume to be 
{1, 2, 3}. By dH]), for = 4, . . . , at least one of the sets {1, 2, k}, {1, 3, k} 
belongs to S. Define the set of pairs 

(7.10) C := |(j, k): jE {2, 3}, A; G {3, ... , 4, j ^ k, k} E s]. 
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Thus, for each k G {3, . . . ,d} there is j with (j, k) G C. Further, for every 
p = 1,2,... there is a pair (j, k) E C such that 

Indeed, if this were not the case, then since pj^p'^^ = Php''^ Php^\ it would follow 
that for some p, 

/3ir=/3r'forfc = 3,...,rf, 



and then T(/3ip) = r(/32p)- Together with Lemma [631 (ii) this would imply that 
/Sip, /32p are A-equivalent, contrary to (17. 4p . Clearly, there is a pair (j, k) E C 
such that p[p^''^ 7^ P^p''^ for infinitely many p. After interchanging the indices 
2 and 3 if j = 3 and then permuting the indices 3, . . . ,d, which does not affect 
the above argument, we may assume that j = 2,k = 3. That is, we may 
assume that {1, 2, 3} G iS and 

/^ip^^^ 7^ f^2p^^ for infinitely many p. 

We now bring f l7.6p into play. It implies that for infinitely many p we have 
P^^^'^ G (32^^^}- After interchanging /3ip, /32p (which does not affect the 

definition of S or the above arguments) we may assume that {1, 2, 3} G S and 

(7.11) /^r =/3rv/3r 

for infinitely many p. 

We repeat the above argument. After renaming again, we may assume that 
the above infinite sequence of indices p for which (17. lip is true is p = 1,2,..., 
and thus, (17. 7p and (17. 8 p are true again. Define again the set C by (I7.10p . 
Similarly as above, we conclude that there is a pair (j, k) E C such that among 
p = 1,2,... there is an infinite subset with /Sjp"''^^ ^ Ptp^'' ■ Then necessarily, 
k ^ 3. After interchanging 2 and 3 if j = 3 (which does not affect (17. lip ) 
and rearranging the other indices 4, . . . , (i, we may assume that j = 2, = 4. 
Thus, {1,2, 3}, {1,2, 4} G S and there are infinitely many p for which we have 
fTrnj) and 

By (17. 6p . for all but finitely many of these p we have P^^^^ G {/Sip^'^^ /^sp^^''}- 
After interchanging Pip, P^p if necessary, which does not affect (17. lip , we may 
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conclude that {1, 2, 3}, {1, 2,4} E S and there are infinitely many p with fl7.1ip 
and 

(7.12) 

Next, by (17. 9p . at least one of {1,3,4}, {2,3,4} belongs to S. Relations 
(17. lip , (17. 121) remain unaffected if we interchange /^^^ and , so without loss 
of generality, we may assume that {1,3,4} G S. By (17. 6p . for all but finitely 
many of the p with (17.110 and fl7.12p . at least two among the numbers Pl^p^^ 
(/i = 1,2,3) must be equal. Using dUI]), ((712]) and = tf^'^V/^ir^ 

follows that {1, 2, 3}, {1, 2, 4}, {1, 3,4} E S and for infinitely many p we have 
(I7II]),(I7I2D and 

(7.13) /3r=/5rv/3r. 

We now show that this is impossible. For convenience we introduce the 
notation 



n(i) _ Php Php ^ ^(4i3) 
Php ■ (3) _ .(4) Php 
yhp Php 



for h = 1,2,3, i = 1,2,3,4, p = 1,2,.... Notice that ^j^J = 1, 
and = for any distinct i,j,k E {1,2,3,4}. Thus, (^-^M 

"hp "hp 



translate into 

,rj I' ^p I" LP _ '-AP ^6p I t^2p y2p 

y--^^) 7^(^^ _ ~(\\ _ I 3(1) _ ' 





3!? 




P3p 




- 1 


PZp 


- 1 






_ P2p 


P2p 



'2p 



B^ ' - B^ 

P3p P3p 

(1) ~ 5(1) ^ 5(1) 



f^lp l^2p l^3p 



B^ ' B^ ' B^ 

P2p P3p Pip 

We distinguish between the cases {2, 3, 4} G 5 and {2, 3, 4} ^ S. 

First suppose that {2,3,4} E S. Then by (17.60 . there are infinitely many 
p such that (I7.14p - (l7.16p hold and at least two among /J^^ = pj^p^'' {h = 
1,2,3) are equal. But this is impossible, since (l7.14p .( 17?T5|) imply /Jjp ^ (B^J; 
mM,<^ imply ^ ^g); and imply pf^ ^ 
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Hence {2,3,4} ^ S. This means that there are only finitely many distinct 

5(2) _ ^(423) 
''hp ~ l-'hp ' 



numbers among (3^1^^ = {h = l,2,3,p = 1,2,...). It follows that there 



are (necessarily non-zero) constants Ci, C2, C3 such that pj^J = C/j for /i = 1, 2, 3 
and infinitely many p. By fl7.16p . fl7.15p . respectively, we have for all these p 
that = iS^]^ and /3g^ = {02/ Ci) l3[^J . By substituting this into dZH]), we get 

^ip ~ '^1 _ '^'i^ip ~ ^^^3 
~P[i - 1 ~ C2(3['J - ci ■ 
By fl7.14p . f l7.16p we have Ci 7^ C3, hence 

5(1) _ ^(413) _ CijCi - C3) 

Plv ~ Pi 



C1C2 + Ci — C2 — C1C3 

is a constant independent of p. But this contradicts {1,3,4} G S and (17. 7p . 

So our assumption that Lemma 17.11 is false leads in all cases to a contradic- 
tion. This completes our proof. □ 

Lemma 7.2. Let C be an L- equivalence class in K . Then the set of /3 such 
that 

(7.17) /3 G Ak n C, L{f3) = K, A[f3] is two times monogenic 

is contained in a union of at most finitely many A- equivalence classes. 

Remark. As mentioned before. Lemma [7.21 is used also in the proof of Theo- 
rem 13. 2[ Our proof of Lemma 17.21 does not enable to estimate the number of 
A-equivalence classes. It is for this reason that we can not prove quantitative 
versions of Theorems 13.11 and 13.21 

Proof. We assume that the set of /3 with (17.171) is not contained in a union of 
finitely many A-equivalence classes and derive a contradiction. 

Pick P with (I7.17p . Then there exist numbers a such that A[a] = A[P] and 
a is not A-equivalent to /3. Consider such a. Then from the identities 

«(2) _ + a(2) _ «{i) (^-3,...,rf) 
and Lemma [6.11 it follows that the pairs 

, , «(2)_^(i)X 
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satisfy 

X + y = 1 in x,y eT, 
where F is the muhiphcative group generated by Aq and the numbers 

/5(2) _^(i)' /3(2) 

By Lemma 16. 3[ (i) , the group F depends only on the given L-equivalence class 
C and is otherwise independent of /3. By Lemma [5.11 the group F is finitely 
generated, and then by Lemma 14.11 the pairs fl7.18p belong to a finite set 
depending only on F, hence only on C. Therefore, the tuple r(a) belongs to a 
finite set depending only on C. In view of Lemma [6.3[ (i). this means that a 
belongs to a union of finitely many L-equivalence classes which depends on C 
but is otherwise independent of /3. Now by Dirichlet's box principle, there is 
an L-equivalence class C with the following property: the set of /3 such that 

/3 G Ak, L{/3) = K, PeC, 

(7-19) <j there is a e C such that A[a] = A[f3] 

and a is not A-equivalent to /3 

cannot be contained in a union of finitely many A-equivalence classes. 

Fix f3o with (17. 191) and then fix ao such that A[ao] = A[f3o], ao G C and ao 
is not A-equivalent to /3o- 

Let P be an arbitrary number with (I7.19p . Choose a such that A[a] = A[I3], 
a G C and a is not A-equivalent to /3. Then there are u,u' G L*, a,a' G L 
with 

(7.20) (3 = u(3o + a, a = u'ao + a' . 
For these u,u' we have 

(7.21) DK/Lil3) = m^('^-i)Dk/l(/3o), DK/Lia) = u'^^''-^^ D k / d^o) . 

On the other hand, it follows from A[aQ\ = A[/3q], A[a] = A[(3] and Lemma EH] 
(ii) that DK/L{l3)/DK/L{a) G A* and D k / M) / D k / liao) G A*. Combined 
with (17.211) and our assumption that A is integrally closed, this gives 

(7.22) u'/u G A*. 
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Since -L(/3o) = K and G A[I3q\ there is a unique polynomial Fq G L[X] 
of degree < d, which in fact belongs to v4[X], such that = Fo(/3o)- Like- 
wise, there is a unique polynomial F G L[X] of degree < d which in fact 
belongs to A[X], such that a = F{f3). Inserting fl7:20|) . it follows that F{X) = 
u'Fq {{X — a) /u) + a' . Suppose that Fq = X]j=o (^j^'^ with m < d and 7^ 0. 
Then F has leading coefficient amu'u~^ which belongs to A. Together with 
(E22D this implies 

(7.23) u^^^am G A. 
Further, by (OH) 

(7.24) W'^^-^^Dk/M) = Dk/M G a. 

We distinguish between the cases m > 1 and m = 1. First let m > 1. We 
have shown that every f3 with (17.191) can be expressed as /3 = m/3o + a with 
u E L*, a E L and moreover, m satisfies (17.231) . (I7.24p . Hence 

ordp(L'x/L(/3o)) , ^ / n ^ ordp(a^) ^ ^ ^/ 

^71 — - o^dp M < for p G PA, 

d{d — 1) m — 1 

where ^(^4) is the collection of minimal non-zero prime ideals of A and ordp 
(p G P(A) ) are the associated discrete valuations, as explained in Section [51 
Thus, for the tuple v{u) := (ordp(u) : p G V{A) ) we have only finitely many 
possibilities. 

We partition the set of /3 with (I7.19P into a finite number of classes according 
to the tuple v{u). Let f3i = uiPq + ai, {32 = U2P0 + 02 belong to the same class, 
where Mi,U2 G L* and 01,02 G L. Then f(Mi) = ^(^2) and so, Uiul^'^ G A* by 
(15. 4p . Hence = v[5i + b with f G A* and b e L. But b = P2 — v[5i is integral 
over y4, hence belongs to A since A is integrally closed. So two elements with 
(I7.19P belonging to the same class are A-equivalent. But then, the set of /3 with 
(I7.19P is contained in a union of finitely many ^-equivalence classes, which is 
against our assumption. 

Now assume that m = 1. Then 



ao = aiPo + ao with ai G A \ {0}, G A, 
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hence a-^ ~ ' = D k / L^Oio) j D k / ■ By Lemma EH] (ii) we have a-^ ~ ' & A*, 
and then ai G A* since by assumption A is integrally closed. Hence ao, /3o 
are A-equivalent, which is against our choice of ao, /3o- We arrive again at a 
contradiction. 

Consequently, our initial assumption that the set of /3 with fl7.17p 

cannot be contained in finitely many A-equivalence classes leads to a con- 
tradiction. This proves Lemma [7.21 □ 

Now our proof of Theorem 13.11 is complete. 



8. Reduction of Theorem 13.21 to a polynomial unit equation 

We keep the assumptions and notation from the previous sections. In par- 
ticular, A is an integrally closed domain with quotient field L of characteristic 
which is finitely generated over Z and is a finite extension of L. Further, 
we denote by G the normal closure of K over L. As it will turn out, the proof 
of part (i) of Theorem 13.21 is elementary. Therefore, in this section we assume 
that [K : L] =: d > 4. Let O = A[a] = A[f3] be a two times monogenic A-order 
in K, where a, (3 are not A-equivalent. 



By Lemma (i) we have 

(8.1) Sij := ^(.) _ eA*afoTZ,j = l,...,d,zj^ j, 

where Aq is the unit group of the integral closure of A in G. Let i,j, k be any 
three distinct indices from {1, . . . ,d}. By Lemma [6. H the identity 

(3U) _ (3{k) + ^(i) _ ^(fc) - 1 
and a similar identity for a, the two pairs (1, 1) and {sij/ejk.Sik/Sjk) satisfy 

Now a straightforward computation gives 



(8.3) — - 1 
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This is valid for any three distinct indices i, j, k. Now take four distinct indices 
i,j,k,l from {l,...,d}. By applying (I8.3p but with the respective triples 
{i,j,k), {i,k,l), replacing {i,j,k), and taking the product, the terms 

with the conjugates of (3 disappear, and we obtain 

(8.4) 

In the remainder of this section we focus on the equation 

(8.5) (Xi - 1)(X2 - 1)(X3 - 1) = {yi - l)(i/2 - l)(l/3 - 1) 

in Xi,a;2,X3,yi,?/2,y3 e V 

where F is a finitely generated multiplicative group, contained in a field of 
characteristic 0. As we just observed, the tuple 

(8.6) — , — , — , — 

\£jk £kl £jl £jk £kl 

is a solution to (18. 5 p with F = Aq. Recall that by Lemma (5. 11 the group Aq 
is finitely generated. 

We prove the following Proposition concerning (18. 5p . 

Proposition 8.1. Let G be a field of characteristic and F a finitely generated 
subgroup of G* . Then there is a finite subset S of T with 1 G 5 such that for 
every solution (xi, . . . , 7/3) G F^ of l\8.5\) . at least one of the following holds: 

(i) at least one 0/ Xi, . . . , 1/3 belongs to S; 

(ii) there are rji, 772, Vs ^ {=^1} such that {yi, y2, y^) is a permutation o/(x^\ Xg^, Xg^); 

(iii) one of the numbers in {xiXj, Xi/xj, yiyj, yi/yj '■ 1 < < j < 3} zs equal 
to either —1, or to a primitive cube root of unity. 

We remark here that case (iii) may occur. For instance, let = —1, let 
p denote a primitive cube root of unity, and assume that i,p G F. Then for 
every m G F, the tuple {u^,iu^, —iu^,u'^, pu'^, p'^u'^) satisfies (18. 5p . There are 
various other such infinite families of solutions. Proposition 18.11 contains only 
the information needed for the proof of Theorem 13.21 
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Proposition 18.11 is deduced from the following lemma. Here and below, T is 
an auxiliary variable, and by = we indicate that an identity holds identically 
in T. 

Lemma 8.2. Let G, T be as in Proposition \8.1\ Let m,n be non-negative 
integers with m + n > 0. Then there is a finite subset TofT with 1 G T such 
that for every solution {xi, . . . ,Xm, Vi, ■ ■ ■ ,yn, z) G r™+"+-'^ of 

(8.7) (1 - Xi) ■ ■ ■ (1 - Xm) = z{l - yi) ... (1 - y^), 
at least one of the following holds: 

(i) at least one of xi, . . . ,yn belongs to T; 

(ii) there are integers ci, . . . , Cm, di, . . . ^d^e with ci ■ ■ ■ Cmdi ■ ■ ■ dn 7^ 0, such 
that 

(8.8) (1 - XiT^^) ■ ■ ■ (1 - XmT'-) = zT^l - y,T^^) ■■■{!- y^T"^"). 

Proof. We proceed by induction on m + n. For m = 1, n = 0, say, our assertion 
is a simple consequence of the fact that the equation 1 — xi = z has only finitely 
many solutions in Xi,z G F. Let p > 2, and suppose that the lemma is true 
for all pairs of non-negative integers m, n with m + n < p. Take non-negative 
integers m, n with m + n = p. By Lemma 14. 3[ for all but finitely many 
solutions (xi, . . . ,yn,z) G F™'+"+-^ of (18. 7p with Xj 7^ 1 for i = 1, . . . , m, 7^ 1 
for j = 1, . . . , n, there are integers Ci, . . . ,dn,e, not all 0, such that (18. 8p holds, 
but some of Ci, . . . , c^, di, . . . ,dn may be zero. Notice that (18. 8 p cannot hold 
with e 7^ and all q, dj equal to 0. Fix a solution (xi, . . . , ?/„, z) satisfying (18. 8p 
where some of the q, dj are 0, and put I := {i : 0}, :={!,..., m} \ /, 
J := {j : (ij 7^ 0}, J*^ := {1, . . . , ra} \ J. Then at least one of /, J is non-empty. 

For z G /, put ttj := |q| and := xf"*^ with u^' = x"'^'. Likewise, for j G J, 
put 6j := and fj '■= yf^ such that = y^ Then (18. 7p implies that 

n(^" - «o ■ 11(1 - X.) = z'Tf \[{T'^ - ■ n(i - 

with 2;' G F, / G Z. Since both sides of this identity must be polynomials with 
equal leading coefficients, we have / = 0, and 

(8.9) \{{l-x{) = z'X[{l-y,). 
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By combining this with f l8.8p we obtain 

(8.10) - T^'x,) = z"T' - T^^y,), 
i&I jeJ 

where z'z" = z. Recall that all but finitely many solutions of (18. 7p satisfy both 

m, dHIDD. 

We apply the induction hypothesis to (18.91) . Notice that \P\ + \J'^\ < m + n 
since at least one of the sets /, J is non-empty. It follows that there exists 
a finite set T' with 1 E T' such that for every tuple (xj : i G P; i/j : j G 
J'^; z') with entries from F, satisfying (18. 9p . either one of the Xj {i G or yj 
(j G J^) belongs to T', or there are integers q {i G I'^), dj : (j G J"^), e' with 

Yliei'^ rijeJ- 7^ ^^^^ ^'^^^ 

J](i-x,r^O = ^'r^'n(i-^^-^'')- 

By multiplying this with (I8.10p . we obtain an identity of the type (18. 8 p where 
none of the q, dj are 0. All solutions (xi, . . . , Xm', Vi, ■ ■ ■ , y-n] z) G r'"+"'+^ of 
(18. 7p satisfy this identity, except those for which some Xi or yj belongs to T' 
or the finitely many solutions with all Xj, y^ different from 1 for which (18. 9p . 
(I8.10p do not both hold. This completes our induction step, and our proof. □ 

Proof of Proposition \8.1\ We take for S the set T from Lemma [8l2| taken with 
m = n = 3 and z = 1. Pick a solution (xi, . . . , y^) G of (18. 5p with none of 
the Xi, yj in S. Then there are integers Ci, . . . ,ds and e with ciC2Czdid2d^ ^ 
such that 

(8.11) (1-Xir^i)(l-X2T^^)(1-X3T^^) = T%l-y^T^^){l-y2T''-){l-y3T^^). 

For i = 1,2,3, define := |cj|, 6j := \di\, Ui := xf"*^, Vi := yf^, where m"' = 
x~^\ = y~'^' . Then (18. lip can be rewritten as an identity in polynomials 

(8.12) (T'^i - Mi)(T'^2 - u^W' - u^) = (T^^ - v,)iT''^ - V2){T''^ - v^) 

with positive integers ai, . . . , 63; here we have divided out possible powers of 
T on both sides. 

In what follows we assume that 

(8.13) Ui + Uj 7^ 0, v, + Vj ^Qioi I <i < j <?, 
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and prove that at least one of the following two alternatives must hold: 

(8.14) ("^^1, "^2, "^s) is a permutation of (mi,M2,M3); 

{ui/uj, Vi/vj {i<i<3 < 3)} 

contains a primitive cube root of unity. 

This clearly implies Proposition 18.11 Since f l8.13p - fl8.15p are invariant under 
permutations of Mi,'U2,W3, under permutations of fi,f2,f3 and under inter- 
changing the tuples (mi, ^2, wa), (t;i,f2,f3), it suffices to consider the cases 
f'i)-f'x) below. 



Case (i). oi > 02 > CI3, 61 > 62 > ^3- 
Then fl8.12p becomes 

rj-^bl+b2+b-i _ ^^rpbl+b2 _ y^J^^l+^S _ y_^J^b2+b-i 

We have either a2 + 03 7^ ai and &2 + ^3 7^ ^1 or 02 + 03 = ai and &2 + &3 = 
But in each of these cases, the second largest exponent on T on the left is 
ai + 02 and that on the right bi + 62; hence U3 = v^. Likewise, the third largest 
exponent on T on the left is ai + and that on the right 61 + 63; so U2 = f2- 
Finally, U1U2U3 = f if 2^3; hence ui = vi. This implies fl8.14p . 

Case (ii). ai > 02 > 03, 61 = 62 > &3- 
Then (18.120 becomes 

+UiUsT''^ + UIU2T''-' - U1U2U3 = 
T^b,+b3 _ ^^^261 _ ^ V2)T^'+^' 

+ (fl + V2)vzT^^ + ViV2T^^ - V1V2V3. 

By f l8.13p . the right-hand side consists of 6 terms with different exponents 
on T and non-zero coefficients. So on the left-hand side, two terms have to 
cancel each other and this is possible only if 02 + 03 = cti and ui = U2U3. 
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Comparing the remaining term with the largest exponent on T on the left 
with the term with the largest exponent on T on the right, and also the terms 
on both sides with the second largest, third largest exponent on T, etc., we 
see that ai + 02 + as = 26i + 63, ai + 02 = 26i, ai + 03 = 61 + 63. This implies 
03 = 63, ai =61, a2 = bi, contradicting Oi > 02- So Case (ii) is impossible. 

Case (iii). ai > 02 > 03, 61 > 62 = &3- 
Then (I8.12p becomes 

+V2V3T''^ + Vi{v2 + V3)T'''-^ - V1V2V3. 

Again, on the left-hand side we must have cancellation of two terms, implying 
0-2 + o-s = 0-1 and ui = U2U3. On the right-hand side, all six terms must have 
different exponents on T, so 263 ^ hi. If 263 > 61, then comparing on both 
sides the three terms with the largest powers of T, we get 01 + 02 + 03 = &1 + 263, 
Oi + 02 = &i + 63, Oi + 03 = 263, implying 01 = 03 = 63 which is impossible. 
So hi > 263. Then comparing the exponents on T of the corresponding terms 
on the left- and right-hand side does not lead to a contradiction. Comparing 
the coefficients of the terms with the second largest exponent on T, i.e., with 
rpai+a2^ rpbi+bs^ with the third largest exponent, etc., we get Ms = f 2 + "^3, 
U2 = -V2V3, U1U3 = -vi, U1U2 = Vi{v2 + V3), U1U2U3 = V1V2V3. Consequently, 
V1V2V3 = U1U2U3 = Vi{v2 + V3y, hence V2V3 = {v2 + 1^3)^, + V2V3 + t;| = 0, 
V2/V3 is a primitive cube root of unity. This implies f lS.lSp . 

Case (iv). oi > 02 > 03, 61 = 62 = 

In this case, the expansion of the left-hand side of f l8.12p gives at least 6 non- 
zero terms with distinct powers of T, while the right-hand side cannot have 
more than 4 terms. So this case is impossible. 

Case (v). oi = 02 > 03, 61 = 62 > 63. 
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Then (Km becomes 

+ {ui + U2)v'iT"-^ + UiU2T°-'^ - 010203 = 

By (18.131) we have on both sides 6 non-zero terms with distinct powers of T. 
Comparing the terms on both sides with the second highest power of T, i.e., 
T^'^i and T"^^^, we get M3 = ^3. Comparing the terms with the third highest 
power of T, i.e., T'^i+"3 and T^^~^^^, we obtain ui + U2 = vi + V2, and finally, 
from the terms with the smallest positive power of T, i.e., T"^, we obtain 
U1U2 = ViV2. Hence {ui,U2} = {vi,V2}. This implies f l8.14p . 

Case (vi). oi = 02 > 03, 61 > 62 = &3- 
Then fl8.12p becomes 

+ {Ui + U2)u-{r"-'' + UiU2T°-''^ - U1U2U2, = 
+V2V3T^^ + Vi{v2 + f3)T^^ - V1V2V3. 

On the left-hand side there are 6 non-zero terms with distinct powers of T. 
So on the right-hand side we must also have 6 non-zero terms with distinct 
powers of T. We have either 263 > bi or 263 < bi. If 263 > bi then, on 
comparing the terms with the three largest exponents on T on both sides we 
get 2ai + 03 = 61 + 263, 2ai = bi + 63, ai + = 263, hence ai = 03 = 63, 
which is impossible. So 61 > 263. Then comparing the coefficients of the 
terms with the largest exponent on T on both sides, the terms with the second 
largest exponent, etc. we get M3 = f 2 + fs, ui + U2 = V3, {ui + 'U2)'U3 = f2f3, 
U1U2 = Vi{v2 + V3), U1U2U3 = V1V2V3. This leads to f if 2^3 = ^1(^2 + ^3)^7 and 
then similarly as in Case (iii) it follows that ^2/^3 is a primitive cube root of 
unity. Hence fl8.15p holds. 

Case (vii). oi = 02 > 03, 61 = 62 = &3- 

This case is impossible since on the left-hand side of f l8.12p we have 6 non-zero 
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terms with distinct powers of T and on the right-hand side not more than 4 
terms. 

Case (viii). oi > 02 = as, &i > &2 = ^s- 
Then fl8.12p becomes 

+U2U3T"-^ + Ui{u2 + Uz)T°-^ - U1U2UZ = 

There are various possibihties depending on whether 203 = ai, 2a3 7^ ai, 
Ml = M2M3, Ml 7^ M2M3 and similarly for the 6j's and fj's. But in each of these 
cases, ai+a3 is the second largest exponent on T occurring on the left and 61+63 
the second largest exponent on the right and so ^2 + ^3 = M2 + M3. Further, 03 is 
the smallest positive exponent on the left and 63 the smallest positive exponent 
on the right and so 'Ui('U2 + M3) = Vi{y2 + M3); and finally U1U2U3 = V1V2V3. It 
follows that Ml = Ml, M2M3 = M2M3, and then {m2,M3} = {m2,M3}. This implies 

Case (ix). ai > a2 = 03, 61 = 62 = 63. 
Then fl8.12p becomes 

yai+2a3 _ ^ M3)T'^i+'^3 - MiT^*^^ + M2M3T'^i 

+Mi(m2 + M3)T"=' - M1M2M3 = 
_ (^^ + ^2 + Vs)T^^' + (M2M3 + M1M3 + MiM2)r''i - M1M2M3. 

Then necessarily, Oi = 203 and Mi = M2M3. Further, all terms on the right-hand 
side are non-zero. Comparing the terms with the largest and second largest 
exponent on T, we see that ai + 203 = 36i, ai + 03 = 26i, hence ai = 03 = 61 
which is impossible. 

Case (x). ai = a2 = 03, 61 = 62 = 63. 

Then fl8.12p implies at once f l8.14p . This completes the proof of Proposition 

EH □ 



T 



ai+2a3 



L+2f)3 
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9. Proof of Theorem 13.21 

Let as before A be an integrally closed domain with quotient field L of 
characteristic which is finitely generated over Z, and K an extension of L of 
finite degree d > 3. Further, denote by G the normal closure of K over L. In 
what follows, we consider pairs (a, (3) such that 



(9.1) 



L{a) = L{(i) = K, a, (3 are integral over A, 
A[a] = A[f3], a,/3 are not A-equivalent. 



The next lemma implies part (i) of Theorems 13.21 and 11.21 

Lemma 9.1. Suppose that [K : L] = 3. Let {a, (3) be a pair with Ili9.1\) . Then 
there is a matrix (tlal) such that 

(9.2) "M€GL(2,L). ,3^0. 

Further, if A is a principal ideal domain then (alal) can be chosen from 
GL(2,A). 

Proof. Let (Tj (z = 1, 2, 3) be the L-isomorphisms of K into G, and write 
a^^^ := cri(a), (3^^^ := cri(/3) for i = 1,2,3. By straightforward linear algebra, 
there are ai, 02, as, 04 G G such that 

/3"> = ^4^ for. = 1.2. 3. 

If we choose the first non-zero element among ai,...,a4 equal to 1, then 
ai, . . . , 04 are uniquely determined. By applying a G Gal(G'/L) and observing 
that a permutes the a^^^ in the same way as the (3^^\ we infer that o"(aj) = 
for i = 1, . . . , 4. Hence ai E L for i = 1, . . . , 4. The matrix {alal) must 
have non-zero determinant since otherwise /S^^'' = Z?^^-* = l3^^\ contrary to our 
assumption L{I3) = K. Next, we must have 03 7^ 0. For otherwise, a, /3 are 
L-equivalent, hence A-equivalent by Lemma [6. 2 [ contrary to our assumptions. 
This proves (19. 2p . 

In case that A is a principal ideal domain, by taking a scalar multiple of 
( 03 04 ), we can see to it that ai, . . . , 04 G A and (ai, . . . , 04) = (1). Then 
{a\al) G GL(2, A) by Lemma This completes the proof of Lemma 1931 □ 
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In what follows, we assume that 
(9.3) 



[K ■.L]=d>4:, Gal(G/L) = S4 if d = 4, 
K is four times transitive over L if d > 5. 



For every pair (a, /3) with (19. ip we define, in the usual manner. 

We start with a simple, but for our proof important observation. 

Lemma 9.2. Let a, {3 satisfy h9. and let {pi,P2,P3,P4) , (o'l? 92, Q's, ^74) be two 
ordered tuples of distinct indices from {1, . . . ,d}. Then there is a G Gal{G/L) 
such that 

^i^p^,Pj) = for e.CLch distinct i,j G {1,2,3,4}. 

Proof By ([93D, there is a G Gal{K/L) such that a{a^P^^) = a^^") for i = 
1,2,3,4. The same holds with /3 instead of a. This implies the lemma at 
once. □ 



Our next observation is that for any pair {a, /3) with (19. ip . 
(9.4) — ^ 1 for i,j, /c G {1, . . . , d}, with i,j, k distinct. 

Indeed, suppose there are distinct indices i,j, k with e^j = Sik- Then by Lemma 
19.21 we have eij = 612 for j = 3, . . . , d. This implies that r(a) = t(/3), where 
r(-) is given by (16. ip . Now Lemma [673] (ii) implies that a, (3 are A-equivalent, 
contrary to (19. ip . 

Lemma 9.3. There is a finite set £ such that for every pair {a, f3) with Ii9. 
at least one of the following alternatives holds: 

(i) Eij/Sik G S for each ordered triple {i,j, k) of distinct indices from {1, . . . , d}; 

(ii) SijSki = SikSji for each ordered quadruple {i,j, k, I) of distinct indices from 
{1,...,4; 

(iii) d = A, and Eij = —Em for each permutation {i,j, k, I) of (1, 2, 3, 4). 
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Proof. Pick a pair (a, (3) with fl9.ip . We apply Proposition 18.11 to (18. 5p . with 
r = Aq and with for {xi,X2,X3,yi, 1/2,113) the tuple (18. 6p with {i,j,k,l) = 



Let S be the finite set from Proposition 18.31 Let S consist of all conjugates 
over L of the elements from S, as well as all roots of unity of order up to 18. 

First suppose that alternative (i) of Proposition 18.11 holds. Then there are 
distinct p,q,r G {1,...,4}, such that Epg/Spr G S. By Lemma U72\ we then 
have Sij/Sik G £ for each triple (i, j, k) of distinct indices from {1, . . . , d}. This 
is alternative (i) of our Lemma. 

Next, suppose that alternative (ii) of Proposition [5?T] holds. Then 



By (I92D, £13/^2?, cannot be equal to £12/ £23 01 £13/ £m- If ^13/^23 = ^14/^24, 
then €1362^ = £ia£2z- Then by Lemma W72\ g.jgt.; = eik£ji for any four distinct 
indices j, /c, / G {1, . . . , d}. This is alternative (ii) of our Lemma. 

Assume that £u/£2?, = £2zl£vi\ then £23 = £vi£vi- By Lemma [9l2| we have 
also = £\2£2'i- Hence {£2-il£viy' = 1- Again by Lemma 19^ and the fact that 
S contains all cube roots of unity, this implies alternative (i) of our Lemma. 

Next, assume that £:i3/£:23 = £34./£i3- Then e^^ = £:23£^34- Then by Lemma 
19. 2[ £23 = ^13^34- This implies again (£i3/£:23)^ = 1 and then alternative (i) of 
our Lemma. 

Finally, assume that £:i3/£:23 = £24,/£i4:- Then 613614 = 623624,. By Lemma 
19. 2^ the same holds after interchanging the indices 2 and 3, and also after 
interchanging 2 and 4; that is, we have also 612614 = £23^^34 and £136:12 = 634624. 
Multiplying together the last two identities and dividing by the first, we obtain 
^12 — ^34' '^^ ^12 = =t^34- First suppose that £12 = £34. Then by Lemma [221 
we have also £13 = £24, £14 = £23- Substituting this into (18. 4p with k, I) = 



1,2,3,4), i.e.. 



(9.5) 
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(1, 2, 3, 4), we obtain 

But this is impossible, since by (]9.4p . both sides are non-zero, and since the 
left-hand side is the opposite of the right-hand side. Hence £12 = —£34 and then 
by Lemma [9.21 also £13 = —£24? ^14 = ~^23- If > 5, then again by Lemma 
19.21 £12 = —£35, implying £34 = £35, which is impossible by (19. 4p . Hence d = 4. 
We conclude that alternative (iii) of our Lemma holds. 

Finally, suppose that (iii) of Proposition 18.11 holds. Then if {xi, . . . ,ys) is 
the tuple (19.51) we have that at least one of the numbers XiXj,Xi/xj,yiyj, 
Vi/yj (1 < i < j < 3) is —1 or a primitive cube root of unity. All these 
possibilities can be combined by saying that there is a permutation {i,j,k,l) 
of (1,2,3,4) such that eikSu/ejkSki or SikSkileuejk is —1 or a primitive cube 
root of unity. By Lemma 19.21 we may replace the indices j, k,l by 1, . . . , 4, 
respectively. Then (£i3^i4/£^23£^34)^ = 1 or {si'ie^i/ eiie2zf = 1- 

First suppose that (£i3£i4/£23£^34)^ = 1- Applying again Lemma 19.21 the 
same holds if we interchange the indices 2 and 4, i.e., (£i3£i2/£^34£^23)^ = 1. As 
a consequence, (£12/^^14)^ = 1- But then another application of Lemma 19.21 
implies that eij/sik G £ for any three distinct indices z, j, k, i.e., alternative (i) 
of our Lemma. 

Finally, suppose that (£i3£34/£i4£23)^ = 1- By Lemma 19^ interchanging the 
indices 1 and 3, we get also (£i3£i4/£34£i2)^ = 1- Multiplying the two identities 
gives (£i3/£i2£^23)^ = 1- Again by Lemma [9.21 interchanging the indices 2 and 
3, we get (£^2/^13^23)^ = 1- Then on dividing the last two identities, we get 
(£i3/£i2)^'^ = 1. A final application of Lemma 19.21 leads to Sij/sik G £ for 
any three distinct indices i,j,k, which is alternative (i) of our Lemma. This 
completes our proof. □ 

Proof of Theorem \3.2[ (ii), (iii). Consider the two times monogenic A-orders 
O = A[a] = A[I3] in K, where a, /3 satisfy fl91|l . 

First consider those A-orders O such that the pair (a, (3) satisfies alternative 
(i) of Lemma [9731 Then by (18. 3p . ( 19. 4p . there is a finite set J-" independent of 
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a, /5 such that G T for any three distinct i, j, k G {1, . . . , c?}. Hence 

for the tuple t(/3) defined by (16. ip there are only finitely many possibilities. 
Then Lemma 16.31 implies that for the A-orders O under consideration, the 
corresponding /3 lie in only finitely many L-equivalence classes. Subsequently, 
by Lemma 1712] these /3 lie in only finitely many A-equivalence classes, and thus 
there are only finitely many possibilities for the A-order O. 

Next, we consider those A-orders O = A[a] = A[P] such that [a, /3) satisfies 
alternative (ii) of Lemma [9l3l Take such a pair {a, (3). By assumption, EijEki = 
SikSjh hence, in view of (18. ip . 



for every quadruple {i, j, k, I) of distinct indices from {1, . . . ,d}. In other words, 
the cross ratio of any four numbers among the a*-*'''s is equal to the cross ratio 
of the corresponding numbers among the /3*^*^'s. Then by elementary projective 
geometry, there is a matrix C = {al al) ^ GL(2, G) such that 

If we assume that the first non-zero entry among ai, . . . , 04 is 1, the matrix C is 
uniquely determined. Any a E Gal{G/L) permutes the sequences a^^\ . . . , 
and/3W,...,/3('^) in the same manner, hence the above relation holds with cr{C) 
instead of C; so cr(C) = C. It follows that C G GL(2,L). We observe that 
03 7^ 0. For otherwise, a, /3 are L-equivalent and then A-equivalent by Lemma 
lO contrary to This shows that O = A[a] = A[l3] is of type I. Notice 

that if A is a principal ideal domain, then by taking a suitable scalar multiple 
of C we can arrange that ai, . . . , 04 G A and (ai, . . . , 04) = (1), and thus, 
C G GL(2, A) by Lemma [631 

Finally, we consider those A-orders O = A[a] = A[f3] such that {a, f3) sat- 
isfies alternative (iii) of Lemma [9.3j then d = 4. Take such a pair {a, (3). By 
assumption, Sij = —Ski for every permutation {i,j,k,l) of (1,2,3,4). Define 

Uq '■= £^12^13^14; 

«0 '■= 1^0(^12'^ + £13 + ^14*^); /3o •= |(^12 + ^13 + ^14)- 
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By (19. 3p . the group Gal(G/L) acts on {a^^\ . . . , a^^''} as the full permuta- 
tion group. Say that = a^'^^^ for a G Gal(G/L), i = 1,2,3,4. Then 
(t(/3») = for i = 1,2,3,4 and thus, a{eij) = ea{i)Mj) 1 < hi < 4, 
i ^ j- Further, Gal(G'/i^) consists of those L-automorphisms that permute 
Q,(2)^ (^(3)^ Q,(4) g^^^ leave a = a^^^ unchanged. Hence uq, ao, /So are invariant un- 
der Gal(G/-ft') and so belong to K. But uq is in fact invariant under Gal(G'/L), 
hence belongs to L. Notice that 

(9.6) /3o = ao + ro, al = uo(3o + sq with tq, sq G L. 
Indeed, (19. 6 p holds with 

'^o := i(£?2 + ^3 + 4^)^ So := iulie^i + e^s + s^^), 

and these tq, so are invariant under Gal(G/L). 
A straightforward computation gives 

Oq^^ = luo{e2i + ^23^ + £24 ) = l'"o(^l2^ - Bl3 " ^14 ) 

and similarly, /Jq^-* = |(£i2 — £^13 — £ia)- Hence 

(^0^ - «o^^ _ -M^ii + ^u) _ „ ,-1,-1 _ , 

By taking conjugates over L we get 

(9.7) -2- ^ = e^,- for 1< z, j < 4, i ^ j. 

As a consequence, the four conjugates of ao over L are distinct, and also the 
four conjugates of /3o over L are all distinct. Hence L{ao) = L{I3q) = K. Notice 
that in the deduction of (18. 3p . no properties of a, /3 were used other than that 
L{a) = L{P) = K. That is, the same reasoning applies if we replace a, /3 by 
ttQ, /3o- But then, applying (18. 3 p both with (a, (3) and with (ao, /^o), using (I9.7p . 
(19. 4p . we obtain 

^(0 _ ^(fc) = _ ^(fc) (1 ^ ^ ^ ^' ^ distinct). 
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By multiplying this identity with Sij/sik we obtain 

Q,(i) _ Q,(i) Q,W _ a\^) 

T^ = ^\ (1 < A; < i, J, distinct). 

This shows that r(/3) = r(/3o), T(a) = r(ao)) where r(-) is defined by (16. 11) . 
By Lemma [6.31 (i), there are A, A' G L*, yU, /i' G L, such that 

a = Aao + 1^1 P = A'/3o + Z^'- 
By combining this with fl9.6p . we obtain 

/3 = aoa^ + aia + 02, « = &o/9^ + + &2 

with ao, ai, 02, ho, 61, 62 G and ao&o 7^ 0. But in fact, we have oq, . . . , 62 G ^ 
since by assumption, A[a\ = A[f3]. This shows that O = A[a] = A[(3] is an 
A-order of type II. This completes the proof of Theorem 13.21 □ 
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